Extracted

• • Target

    d62c1f65b0ad9427fa41e32951526435e372d2f09bb81e6079dabdad915f84b4.bin

  • Size

    120KB

  • MD5

    e5d69699bde3b15ff93d21c5b673bd8a

  • SHA1

    7407968eb3d942ebabee4b432df4c4a9ac96c3e3

  • SHA256

    d62c1f65b0ad9427fa41e32951526435e372d2f09bb81e6079dabdad915f84b4

  • SHA512

    46312be3e25e994e56e92869ea93a2452a149d0c04fb9067f13412f5d5f527597ec1c62a2c682d93a6d84f8b9065c21713177056f6853427853bdf9aa4038121

  Score

  10^/10

  allcomestealersuricata

  • Allcome

    A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

    stealerallcome

  • suricata: ET MALWARE Win32/ClipBanker.OC CnC Activity M1

    suricata: ET MALWARE Win32/ClipBanker.OC CnC Activity M1

    suricata

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2